Rocket.Chat: Stored XSS in Rocket.Chat HTML File Export — Unauthenticated Entry via LiveChat

A vulnerability was discovered in the HTML file export feature of Rocket.Chat. The vulnerability allowed an attacker to inject arbitrary JavaScript code that would execute when the exported HTML file was opened. The root cause was that the application did not properly sanitize or escape...